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-- The MAILING DATE of this communication appears on the cover sheet with the correspondence address — 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )M Responsive to communication(s) filed on 03 April 2001 . 
2a)D This action is FINAL. 2b)M This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) M Claim(s) 7-72 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) H Claim(s) 7-72 is/are allowed. 

6) D Claim(s) is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on 03 April 2001 is/are: a)D accepted or b)!3 objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1 ) |3 Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) □ Notice of DraftspersorVs Patent Drawing Review (PTO-948) Pa P er No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5 ) □ Notice of lnformal Patent Application (PTO-1 52) 

Paper No(s)/Mail Date . 6) □ Other: . 
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DETAILED ACTION 



1 . This action is in response to the communication filed on April 3, 2001 . Claims 1 
- 12 were received for consideration. No preliminary amendments for the claims were 
filed. Claims 1- 12 are currently being considered. 



Drawings 



2. Figure 1 should be designated by a legend such as -Prior Art- because only 
that which is old is illustrated. See MPEP § 608.02(g). Corrected drawing sheets are 
required in reply to the Office action to avoid abandonment of the application. The 
replacement sheet(s) should be labeled "Replacement Sheet" in the page header (as 
per 37 CFR 1 .84(c)) so as not to obstruct any portion of the drawing figures. If the 
changes are not accepted by the examiner, the applicant will be notified and informed of 
any required corrective action in the next Office action. The objection to the drawings 
will not be held in abeyance. 



Claim Objections 
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3. Claim 7 is objected to because of the following informalities: On line 1 8 of claim 
7, "receive the second site's site a key" should be changed to "receive the second site's 
site key." Appropriate correction is required. 



Claim Rejections - 35 (JSC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1 ), (2), and (4) of section 371 (c) of this 
title before the invention thereof by the applicant for patent. 

4. Claims 1 - 12 are rejected under 35 U.S.C. 102(e) as being anticipated by Crane 
etal. (U.S. Patent 6,510,236). 

Regarding claim 1, Crane discloses: 

A computerized method for sharing network authentication comprising: 
receiving login information at an authentication site for a user logging into a first 

site, wherein the login information comprises an identification of the user (column 3 lines 

38 -52); 
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verifying the login information at the authentication site (column 3 line 53 - 
column 4 line 10); 

transmitting a user session key and a second site's site key to the verified user 
through the first site, wherein the user session key and the second site's site key are 
generated at the authentication site (column 4 lines 4-10); 

receiving the user session key at the authentication site for the user logging into 
a second site (Figure 4, column 4 line 48 - column 5 line 43); 

verifying the user session key from the user at the authentication site (Figure 4, 
column 4 line 48 - column 5 line 43); and 

transmitting the second site's site key to the verified user through the second site 
(Figure 4, column 4 line 48 - column 5 line 43). 

Regarding claim 7, Crane discloses: 

A computer system for sharing network authentication comprising: 

a first computer, wherein the first computer comprises a memory and a processor 

(Figure 3, Figure 4); 

executable software residing in the first computer memory, wherein the software 
is operative with the first computer processor to: 

receive login information from a user logging into the first computer, wherein the 
login information comprises an identification of the user (column 3 lines 38 - 52); 

transmit the login information to an authentication computer, wherein the 
authentication computer comprises a memory and a processor (column 3 lines 38 - 52); 
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receive a user session key and a second site's site key from the authentication 
site (column 4 lines 4-10); and 

transmit the user session key and the second site's site key to the user (column 4 
lines 4 -10); 

a second computer, wherein the second computer comprises a memory and a 
processor (Figure 3, Figure 4); 

executable software residing in the second computer memory, wherein the 
software is operative with the second computer processor to: 

receive the user session key from the user logging into the second computer; 
transmit the user session key to the authentication computer (Figure 4, column 4 line 48 
- column 5 line 43); 

receive the second site's site key from the authentication site (Figure 4, column 4 
line 48 - column 5 line 43); and 

transmit the second site's site key to the user (Figure 4, column 4 line 48 - 
column 5 line 43); and 

executable software residing in the authentication computer memory, wherein the 
software is operative with the authentication computer processor to: 

receive the login information from the user logging into the first computer (column 
3 lines 38 - 52); 

verify the login information (column 3 line 53 - column 4 line 1 0); 
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transmit the user session key and the second site's site key to the first computer, 
wherein the user session key and the second site's site key are generated at the 
authentication site (column 4 lines 4-10); 

receive the user session key from the user logging into the second computer 
(Figure 4, column 4 line 48 - column 5 line 43); 

verify the user session key (Figure 4, column 4 line 48 - column 5 line 43); and 

transmit the second site's site key to the second computer (Figure 4, column 4 
line 48 - column 5 line 43). 

Regarding claim 1 1 , Crane discloses: 

A computer system for sharing network authentication comprising: 

an authentication computer, wherein the computer comprises a memory and a 
processor (Figure 3, Figure 4); and 

executable software residing in the computer memory wherein the software is 
operative with the processor to: 

receive login information at an authentication site for a user logging into a first 
site, wherein the login information comprises an identification of the user (column 3 lines 
38 -52); 

verify the login information at the authentication site (column 3 line 53 - column 4 
line 10); 
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transmit a user session key and a second site's site key to the verified user 
through the first site, wherein the user session key and the second site f s site key are 
generated at the authentication site (column 4 lines 4-10); 

receive the user session key at the authentication site for the user logging into a 
second site (Figure 4, column 4 line 48 - column 5 line 43); 

verify the user session key from the user at the authentication site (Figure 4, 
column 4 line 48 - column 5 line 43); and 

transmit the second site's site key to the verified user through the second site 
(Figure 4, column 4 line 48 - column 5 line 43). 

Regarding claim 12, Crane discloses: 

A computer data signal embodied in a digital data stream for sharing network 
authentication, wherein the computer data signal is generated by a method comprising 
the steps of: 

receiving login information at an authentication site for a user logging into a first 
site, wherein the login information comprises an identification of the user (column 3 lines 
38 -52); 

verifying the login information at the authentication site (column 3 line 53 - 
column 4 line 10); 

transmitting a user session key and a second site's site key to the verified user 
through the first site, wherein the user session key and the second site's site key are 
generated at the authentication site (column 4 lines 4-10); 
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receiving the user session key at the authentication site for the user logging into 
a second site (Figure 4, column 4 line 48 - column 5 line 43); 

verifying the user session key from the user at the authentication site (Figure 4, 
column 4 line 48 - column 5 line 43); and 

transmitting the second site's site key to the verified user through the second site 
(Figure 4, column 4 line 48 - column 5 line 43). 

Claim 2 is rejected as applied above in rejecting claim 1 . Furthermore, Crane discloses: 

The method of claim 1 , additionally comprising storing the login information, 
generated user session key, and generated second site's site key at the authentication 
site (Figure 4, column 4 line 48 - column 5 line 43). 

Claim 3 is rejected as applied above in rejecting claim 1 . Furthermore, Crane discloses: 

The method of claim 1, wherein the authentication site comprises the first site 
(column 3 lines 38-52). 

Claim 4 is rejected as applied above in rejecting claim 1 . Furthermore, Crane discloses: 

The method of claim 1 , wherein the identification of the user comprises a user 
identification and a user password (Figure 2 step 28, column 3 lines 38 - 52). 

Claim 5 is rejected as applied above in rejecting claim 1 . Furthermore, Crane discloses: 
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The method of claim 1 wherein the information of the user comprises a user 
biometric (column 3 lines 14 - 24). 

Claim 6 is rejected as applied above in rejecting claim 1 . Furthermore, Crane discloses: 
The method of claim 1 wherein the verification of the login information comprises 
comparing the login information to a stored login information at the authentication site 
(column 3 lines 38 - 52). 

Claim 8 is rejected as applied above in rejecting claim 7. Furthermore, Crane discloses: 

The system of claim 7, wherein the first computer, second computer, and 
authentication computer are connected via a computer communications network 
(column 5 line 55 - column 6 line 15). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Crane discloses: 

The system of claim 8, wherein the computer communications network 
comprises an Internet (column 5 line 55 - column 6 line 15). 

Claim 10 is rejected as applied above in rejecting claim 8. Furthermore, Crane 
discloses: 

The system of claim 8, wherein the computer communications network 
comprises a network comprising a TCP/IP protocol (column 5 line 55 - column 6 line 
15). 
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Conclusion 



5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 703- 
305-8892. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 703-305-9648. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 



KA 

7/30/2004 




